Behavioral task
behavioral1
Sample
86b183234cbe09b3d75c381036cd8a0a_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
86b183234cbe09b3d75c381036cd8a0a_JaffaCakes118
-
Size
600KB
-
MD5
86b183234cbe09b3d75c381036cd8a0a
-
SHA1
848fc40570bb3405a98b3016f8b95f6caeb29039
-
SHA256
c1e6a4378924352861a06fd287111dc4da04a6321287822a1e26c5ec73fd9bc6
-
SHA512
1ecdf0c012977f3e0fd61360f02abdbd65a5ee78569cc19f026763c2b5c12aedfd3bed4a69882df43284977b45ddbd8462b1591ec83225d6c30a0f4886df0470
-
SSDEEP
12288:5yek+4/PnuVjsYB6BPws2B7W5ofdshAzq6pd1OqedqyD15C:0qsYB6BIfdWOfdsuWCLxe9E
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86b183234cbe09b3d75c381036cd8a0a_JaffaCakes118
Files
-
86b183234cbe09b3d75c381036cd8a0a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Themida Size: 512B - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Themida Size: 599KB - Virtual size: 615KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE